config

type Config struct {
	Host                 string         `json:"host" toml:"host"`
	Port                 int            `json:"port" toml:"port"`
	DataDir              string         `json:"data_dir" toml:"data_dir"`
	DBPath               string         `json:"-" toml:"-"`
	PublicURL            string         `json:"public_url,omitempty" toml:"public_url"`
	PublicOrigins        []string       `json:"public_origins,omitempty" toml:"public_origins"`
	Proxy                ProxyConfig    `json:"proxy,omitempty" toml:"proxy"`
	WatchExcludePatterns []string       `json:"watch_exclude_patterns,omitempty" toml:"watch_exclude_patterns"`
	CursorSecret         string         `json:"cursor_secret" toml:"cursor_secret"`
	GithubToken          string         `json:"github_token,omitempty" toml:"github_token"`
	Terminal             TerminalConfig `json:"terminal,omitempty" toml:"terminal"`
	AuthToken            string         `json:"auth_token,omitempty" toml:"auth_token"`
	RemoteAccess         bool           `json:"remote_access" toml:"remote_access"`
	NoBrowser            bool           `json:"no_browser" toml:"no_browser"`
	DisableUpdateCheck   bool           `json:"disable_update_check" toml:"disable_update_check"`
	NoSync               bool           `json:"-" toml:"-"`
	PG                   PGConfig       `json:"pg,omitempty" toml:"pg"`
	WriteTimeout         time.Duration  `json:"-" toml:"-"`

	// AgentDirs maps each AgentType to its configured
	// directories. Single-dir agents store a one-element
	// slice; unconfigured agents use nil.
	AgentDirs map[parser.AgentType][]string `json:"-" toml:"-"`

	ResultContentBlockedCategories []string `json:"result_content_blocked_categories,omitempty" toml:"result_content_blocked_categories"`

	// HostExplicit is true when the user passed --host on the CLI.
	// Used to prevent auto-bind to 0.0.0.0 when the user
	// explicitly requested a specific host.
	HostExplicit bool `json:"-" toml:"-"`
	// contains filtered or unexported fields
}

type PGConfig struct {
	URL             string   `toml:"url" json:"url"`
	Schema          string   `toml:"schema" json:"schema"`
	MachineName     string   `toml:"machine_name" json:"machine_name"`
	AllowInsecure   bool     `toml:"allow_insecure" json:"allow_insecure"`
	Projects        []string `toml:"projects" json:"projects,omitempty"`
	ExcludeProjects []string `toml:"exclude_projects" json:"exclude_projects,omitempty"`
}

type ProxyConfig struct {
	// Mode enables a managed proxy implementation.
	// Currently supported: "caddy".
	Mode string `json:"mode,omitempty" toml:"mode"`
	// Bin overrides the proxy executable path.
	Bin string `json:"bin,omitempty" toml:"bin"`
	// BindHost is the local interface/IP the proxy binds to.
	BindHost string `json:"bind_host,omitempty" toml:"bind_host"`
	// PublicPort is the external port exposed by the proxy.
	PublicPort int `json:"public_port,omitempty" toml:"public_port"`
	// TLSCert and TLSKey are used by managed HTTPS mode.
	TLSCert string `json:"tls_cert,omitempty" toml:"tls_cert"`
	TLSKey  string `json:"tls_key,omitempty" toml:"tls_key"`
	// AllowedSubnets restrict inbound clients to these CIDRs.
	AllowedSubnets []string `json:"allowed_subnets,omitempty" toml:"allowed_subnets"`
}

type TerminalConfig struct {
	// Mode: "auto" (detect terminal), "custom" (use CustomBin),
	// or "clipboard" (never launch, always copy).
	Mode string `json:"mode" toml:"mode"`
	// CustomBin is the terminal binary path (used when Mode == "custom").
	CustomBin string `json:"custom_bin,omitempty" toml:"custom_bin"`
	// CustomArgs is a template for terminal args. Use {cmd} as
	// placeholder for the resume command (e.g. "-- bash -c {cmd}").
	CustomArgs string `json:"custom_args,omitempty" toml:"custom_args"`
}